BlackOps Privacy Policy
Effective date: October 21, 2026
BlackOps is the internal case-management application that Blackfish Investigative Partners LLC (“Blackfish”, “we”, “us”) operates for its own staff. This policy explains what information BlackOps collects, why we collect it, and how we protect it.
Who uses BlackOps
Only staff and contractors whom Blackfish has invited, signing in with a Blackfish Google Workspace account. BlackOps is not offered to the public or to other businesses.
Information we collect
- Staff account information: name, work email, role, Division, skills, and a record of sign-ins and actions taken in the application.
- Case information that staff enter in the course of their work: client and contact details, case records, files, agreements, time and expense entries, and invoices.
- QuickBooks Online data, once an administrator connects Blackfish’s own QuickBooks company: the company identifier, the customer and item records needed to create invoices, invoice numbers, amounts and delivery status.
- Technical data: request logs kept by our hosting provider for security and troubleshooting.
How we use information
To run Blackfish’s casework, billing and invoicing; to keep the service secure; and to meet our legal and accounting obligations. We do not sell personal information, and we do not use it for advertising.
QuickBooks Online
BlackOps connects only to Blackfish’s own QuickBooks Online company, with the Accounting scope only. Access tokens are stored encrypted (AES-256-GCM), and the application’s client secret is held in Google Secret Manager. Only Admin and Superadmin staff can connect QuickBooks, export invoices or send them, and a person reviews every invoice before it is created or sent. An administrator can disconnect BlackOps from QuickBooks at any time. Intuit’s own privacy statement governs data held in QuickBooks.
Who we share information with
Service providers that host or process data for us, only so they can provide their service: Google Cloud (hosting and sign-in), Neon (database), Google Workspace and Google Drive (email and files), Intuit QuickBooks (invoicing) and DocuSign (agreements). We may also disclose information when the law requires it.
How we protect information
Google sign-in stands in front of every page. The server checks each person’s permissions on every read and write. Data is encrypted in transit (HTTPS) and at rest by our providers, and sensitive actions are recorded in an audit log.
How long we keep information
As long as casework, billing and legal record-keeping require; then it is deleted or anonymized. QuickBooks tokens are deleted when an administrator disconnects QuickBooks.
Your choices
Staff can ask an administrator to see or correct their account information. Anyone whose information appears in a case can contact us at the address below.
Changes to this policy
When this policy changes, we update the effective date above and tell staff about material changes.
Contact us
Blackfish Investigative Partners LLC
2745 Dallas Parkway, Ste 405, Plano, TX 75093
blackops@blackfishintel.com